diff --git a/flake.nix b/flake.nix
index f724624..8ea4b91 100644
--- a/flake.nix
+++ b/flake.nix
@@ -11,6 +11,10 @@
       url = "github:nix-community/disko";
       inputs.nixpkgs.follows = "nixpkgs";
     };
+    sops-nix = {
+      url = "github:Mic92/sops-nix";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
   };
 
   outputs =
@@ -19,6 +23,7 @@
       nixpkgs,
       nixvim,
       disko,
+      sops-nix,
       ...
     }:
     {
@@ -43,6 +48,7 @@
                   modules = [
                     { networking.hostName = host; }
                     disko.nixosModules.disko
+                    sops-nix.nixosModules.sops
                     ./hosts/${host}/configuration.nix
                     ./hosts/${host}/state.nix
                   ];
diff --git a/shared/base.nix b/shared/base.nix
index d84c8b4..6ba8fd6 100644
--- a/shared/base.nix
+++ b/shared/base.nix
@@ -27,6 +27,7 @@
       termshark
 
       age
+      sops
       minisign
       pwgen
       ssss